Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/tEAXI6moTmA7apie2FkhEuSCakQ.asa
File:                     tEAXI6moTmA7apie2FkhEuSCakQ.asa (raw, json)
Hash identifier:          HlyH5M9WBAv8xeUgUK8j4M2u2h1cpfJdVR6eA0ERf4o=
Subject key identifier:   B4:40:17:23:A9:A8:4E:60:3B:6A:98:9E:D8:59:21:12:E4:82:6A:44
Certificate issuer:       /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial:       01A023858465E471A3141D394A12CE91150F
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/tEAXI6moTmA7apie2FkhEuSCakQ.asa
Signing time:             Fri 21 Aug 2026 08:52:27 +0000
ASPA not before:          Fri 21 Aug 2026 08:52:27 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            218921
Providers:                AS: 215783
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:23:85:84:65:e4:71:a3:14:1d:39:4a:12:ce:91:15:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
        Validity
            Not Before: Aug 21 08:52:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4401723a9a84e603b6a989ed8592112e4826a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:30:5c:2d:76:e6:3b:a8:fd:05:85:85:ba:
                    2a:85:26:65:97:67:63:21:06:0d:5b:7b:ec:5f:d3:
                    de:6d:e8:c3:91:22:f5:2b:2b:33:0a:25:0e:5f:5d:
                    a3:01:01:2a:dd:21:fe:51:b0:3c:e4:6a:82:05:fd:
                    92:c0:3f:a2:c3:8f:60:57:25:a9:6d:a2:3a:0e:24:
                    7d:7e:8c:87:7e:70:0f:32:5c:b6:56:aa:92:9b:59:
                    05:60:5b:64:48:aa:54:01:50:29:42:f4:23:ed:1c:
                    e4:8c:af:36:da:ca:06:5b:f2:49:b7:eb:32:0f:d1:
                    8a:c3:0c:49:fd:ce:96:13:b3:84:90:11:27:8a:89:
                    82:5c:da:34:22:d8:c4:e0:19:4b:e2:68:ad:bb:be:
                    8a:60:6e:d0:b6:22:66:8a:e9:53:e0:c9:0d:70:d8:
                    6a:33:9d:58:4a:29:15:c7:f4:4c:ef:b6:82:20:5d:
                    07:b7:69:3c:34:8e:49:a4:d6:a7:2b:4f:17:4c:17:
                    83:40:4a:23:68:ba:34:ca:61:5c:7b:a0:ff:b9:b6:
                    8a:89:ed:31:91:31:69:a9:c9:40:86:66:ab:71:26:
                    3f:9c:c8:e4:ba:f0:03:c5:00:9c:2e:2e:c9:d6:88:
                    dd:85:cf:71:40:9f:c7:4e:e0:9e:73:5f:b0:08:c9:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:40:17:23:A9:A8:4E:60:3B:6A:98:9E:D8:59:21:12:E4:82:6A:44
            X509v3 Authority Key Identifier:
                keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/tEAXI6moTmA7apie2FkhEuSCakQ.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  218921

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:17:9e:7d:e2:95:c9:1a:da:0d:d8:ec:cf:a8:39:31:8c:
         42:46:d1:8c:9a:d4:4c:67:3c:ea:c4:76:27:7b:89:c9:ee:3a:
         3c:ec:7c:54:c4:3e:51:0b:40:f8:ba:67:7e:f8:33:49:1e:87:
         2b:4c:c5:c2:e9:a2:09:76:0a:ab:18:7d:57:28:3a:f1:8d:a0:
         fc:36:b5:67:dc:3d:eb:72:0d:a2:50:3e:82:9d:d6:bf:cd:71:
         83:7c:ed:b6:f3:91:bb:0d:76:f9:74:e0:f5:fc:15:5a:24:be:
         a1:f2:39:37:60:6d:2b:f7:29:6d:4c:48:16:72:e0:f4:ba:3b:
         e4:e2:83:e4:5c:bc:76:34:55:eb:68:3e:a5:36:27:4e:e1:2b:
         da:95:91:7f:8a:fb:3e:84:94:b5:8b:79:3b:fa:47:c5:a4:60:
         5c:5a:e8:70:44:51:5a:25:f9:90:76:da:18:66:53:7b:67:6b:
         30:27:78:b3:99:a7:68:31:81:74:cf:23:94:d4:55:0e:21:ff:
         15:2b:c8:2c:fd:6b:69:92:a5:94:c2:62:de:e7:ea:43:7d:cf:
         7d:d2:32:5c:ae:06:bd:2c:e5:65:76:44:c2:53:86:05:d4:20:
         44:a2:39:c7:52:25:52:3d:c2:5f:49:ab:2e:6b:de:cf:5a:a7:
         87:38:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:18:24 2026 by rpki-client